CVE-2026-112907 | tox-dev filelock up to 4.2.0 SoftFileLock src/filelock/_soft.py _read_lock_file resource consumption

October 26, 2026 Yanac

A vulnerability was found in tox-dev filelock up to 4.2.0. It has been declared as problematic. Affected is the function _read_lock_file of the file src/filelock/_soft.py of the component SoftFileLock. The manipulation results in resource consumption.

This vulnerability was named CVE-2026-112907. The attack needs to be approached locally. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More